The Effectiveness of Parameterized Queries in Preventing SQL Injection Attacks at Go

Rizaldi Fatah Sidik (), Syifa Nurgaida Yutia and Rana Zaini Fathiyana
Additional contact information
Rizaldi Fatah Sidik: Telkom University
Syifa Nurgaida Yutia: Telkom University
Rana Zaini Fathiyana: Telkom University

A chapter in Proceedings of the International Conference on Enterprise and Industrial Systems (ICOEINS 2023), 2023, pp 204-216 from Springer

Abstract: Abstract SQL Injection attacks are one of the common security risks that occur in applications. SQL Injection cases can lead to data and sensitive information leaks, and even potential application data deletion. This research examines the effectiveness of using parameterized queries in the Go programming language as a method of prevention against SQL Injection attacks. Go provides the feature of parameterized queries by using placeholders such as question marks (?) or parameter names. Parameterized queries separate input values from SQL statements and are executed securely by the database driver. In this study, the use of parameterized queries in Go is evaluated to prevent query manipulation by users in the application. The research is conducted by testing four HTTP request operations: GET, POST, PUT, and DELETE, both before and after the use of parameterized queries. The testing results, based on Acunetix Web Vulnerability scanning, prove that all testing operations are vulnerable to SQL Injection when not using parameterized queries, while successfully mitigating SQL Injection attacks when using parameterized queries in Go.

Keywords: Go; HTTP; Parameterized Queries; SQL Injection; Web Vulnerability (search for similar items in EconPapers)
Date: 2023
References: Add references at CitEc
Citations:

There are no downloads for this item, see the EconPapers FAQ for hints about obtaining it.

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:spr:advbcp:978-94-6463-340-5_18

Ordering information: This item can be ordered from
http://www.springer.com/9789464633405

DOI: 10.2991/978-94-6463-340-5_18

Access Statistics for this chapter

More chapters in Advances in Economics, Business and Management Research from Springer
Bibliographic data for series maintained by Sonal Shukla () and Springer Nature Abstracting and Indexing ().